Tom's Guide | Tom's Hardware | Tom's Games
![]() |
![]() |
![]() |
I am experiencing a weird problem. I should preface this by saying that a few days ago, my computer was recently infected with what Spybot has confirmed was the Smitfraud virus. I figured something was up when my normal home page was changed to Google.com. Eventually, when I Googled something, clicking on the result directed me to another website, usually with a domain such as qipsearch.com or qiwisearch.com. Pure malware issue.
Now, fast forward to today, the computer was repaired and the malware virus appears to be gone. Scans with three different programs were performed. And I changed my default home page back.
However, I am still getting redirected to these foreign website domains that I mentioned when I click through a Google search result.
One time, when I clicked the "back" button in trying to prevent going to one of these foreign websites, I got an error message related to the filename "lsass.exe". I figured that might be tied into the malware, but sure enough, when I scanned all files with that name, they were not infected.
I hope the virus is all gone. My programs say it is. Then again, why am I still having to now copy link locations and paste them to avoid falling into this little trap set out for me? How can I remove this trap? Any info would be greatly appreciated. I have given as much information as I could regarding this matter.

roachradio, possible the nasty infected 'restore' and gets put back each time? Disable 'restore', scan, reboot and re-enable 'restore'. Quite easy to overlook when cleaning a nasty. BTDT.
HTH.
Ed in Texas.

I will admit, I did do a system restore thinking that it would undo the virus. As it turns out, there's a remnant in there! So I'll have to turn off "turn back time" (I found instructions: http://support.microsoft.com/kb/310... By the way, which scanning program would you suggest? I got 'em all: Norton, Spybot, AdAware...
I'll knock this out this weekend and let you know how I fare. Thanks, Ed from the Lone Star State!

FYI - I did the suggested scans in safe mode and the problem appears to be gone - knock on wood... But at least now I won't have to fear landing inadvertently on another website when I click through Google search results. Thanks again!

![]() |
![]() |
![]() |

This post is quite old and has been locked from receiving new replies. Please create a new posting instead.
| Ads by Google |